Abstract: A building security system includes one or more memory devices configured to store instructions, that when executed on one or more processors, cause the one or more processors to receive, for each of alarm rules, one or more alarm rule parameters for each of the alarm rules from a user device, receive security system data from a security system, and for each alarm rule of the alarm rules determining, based on the one or more alarm rule parameters for the alarm rule, whether the alarm rule is triggered by the security system data and generating an alarm for the alarm rule in response to determining that the alarm rule is triggered.

Abstract: Provided herein are systems and methods for determining relationships between events occurring in networks. Notifications describing events occurring in networks can be received and processed to determine groups of network event types. A root-cause network can be generated based on the events, with the nodes of the root-cause network representing different event types and the edges of the root-cause network indicating directional, causal relationships between the nodes. A received network event can be processed to determine potential causes of the received network event based on the root-cause network and other events received by the network.

Abstract: Provided herein are systems and methods for determining relationships between events occurring in networks. Notifications describing events occurring in networks can be received and processed to determine groups of network event types. A root-cause network can be generated based on the events, with the nodes of the root-cause network representing different event types and the edges of the root-cause network indicating directional, causal relationships between the nodes. A received network event can be processed to determine potential causes of the received network event based on the root-cause network and other events received by the network.

Abstract: A computing device for managing a security system is disclosed. The computing device includes one or more processors. In some embodiments, the one or more processors can receive a number of events occurring in one or more of a number of polling loop networks. The events are monitored by a control device. The one or more processors can determine whether an occurrence frequency of the events exceeds a first threshold, where the occurrence frequency is defined as a number of the events divided by a period of time during which the events occurred. The one or more processors can in response to determining that the occurrence frequency exceeds the first threshold, automatically notify a user of the security system via a web application.

Abstract: Provided herein are systems and methods for determining relationships between events occurring in networks. Notifications describing events occurring in networks can be received and processed to determine groups of network event types. A root-cause network can be generated based on the events, with the nodes of the root-cause network representing different event types and the edges of the root-cause network indicating directional, causal relationships between the nodes. A received network event can be processed to determine potential causes of the received network event based on the root-cause network and other events received by the network.

Abstract: Provided herein are systems and methods for determining relationships between events occurring in networks. Notifications describing events occurring in networks can be received and processed to determine groups of network event types. A root-cause network can be generated based on the events, with the nodes of the root-cause network representing different event types and the edges of the root-cause network indicating directional, causal relationships between the nodes. A received network event can be processed to determine potential causes of the received network event based on the root-cause network and other events received by the network.

Abstract: A building security system includes one or more memory devices configured to store instructions, that when executed on one or more processors, cause the one or more processors to receive, for each of alarm rules, one or more alarm rule parameters for each of the alarm rules from a user device, receive security system data from a security system, and for each alarm rule of the alarm rules determining, based on the one or more alarm rule parameters for the alarm rule, whether the alarm rule is triggered by the security system data and generating an alarm for the alarm rule in response to determining that the alarm rule is triggered.

Abstract: A method for managing alarm data of multiple physical locations. The method includes receiving a plurality of sets of alarm data. Each of the plurality of sets of alarm data corresponds to a respective physical location. Each of the plurality of sets of alarm data includes a respective occurrence value corresponding to each of a plurality of alarm categories. The method includes receiving a list indicating one or more alarm preferences. of the or more alarm preferences are associated with one or more priority values. The method includes arranging, responsive to identifying a first of the one or more alarm preferences that indicates a first subset of the alarm categories, a ranking of the plurality of sets of alarm data based on respective occurrence values of the first set of alarm categories. The method includes displaying, via a user interface, the ranking of the plurality of sets of alarm data.

Abstract: The present disclosure relates to a network-based centralized security monitoring (CSM) system. An example CSM includes one or more memory devices configured to store instructions thereon that, when executed by one or more processors, cause the one or more processors to receive a plurality of parameter data elements comprising one or more characters for a plurality of parameter types from a monitored site, determine for each of the plurality of parameter types a number of occurrences of a plurality of different character groups in the plurality of parameter data elements, generate a count structure indicating the number of occurrences of the plurality of different character groups in the plurality of parameter data elements for each of the plurality of parameter types, and generate a security signature for the monitored site, the security signature comprising the count structure for each of the plurality of parameter types.

Abstract: The present disclosure relates to a network-based centralized security monitoring (CSM) system. An example CSM includes one or more memory devices configured to store instructions thereon that, when executed by one or more processors, cause the one or more processors to receive a plurality of parameter data elements comprising one or more characters for a plurality of parameter types from a monitored site, determine for each of the plurality of parameter types a number of occurrences of a plurality of different character groups in the plurality of parameter data elements, generate a count structure indicating the number of occurrences of the plurality of different character groups in the plurality of parameter data elements for each of the plurality of parameter types, and generate a security signature for the monitored site, the security signature comprising the count structure for each of the plurality of parameter types.

Abstract: A user interface for a security system includes a processing circuit, the processing circuit including a processor and memory coupled to the processor, the memory having instructions stored thereon that, when executed by the processor, cause the processing circuit to receive, from a user via a user device, a user request for information relating to the security system, determine, using natural language processing, an intent and one or more entities associated with the user request, the intent describing a purpose of the user request and the one or more entities describing a type or source of security system data, generate a response to the user request based on the intent and the one or more entities, wherein the response is a graphical display of security system data, and send the response to the user device.

Abstract: A method for managing alarm data of multiple physical locations. The method includes receiving a plurality of sets of alarm data. Each of the plurality of sets of alarm data corresponds to a respective physical location. Each of the plurality of sets of alarm data includes a respective occurrence value corresponding to each of a plurality of alarm categories. The method includes receiving a list indicating one or more alarm preferences. of the or more alarm preferences are associated with one or more priority values. The method includes arranging, responsive to identifying a first of the one or more alarm preferences that indicates a first subset of the alarm categories, a ranking of the plurality of sets of alarm data based on respective occurrence values of the first set of alarm categories. The method includes displaying, via a user interface, the ranking of the plurality of sets of alarm data.

Abstract: A building security system includes one or more memory devices configured to store instructions, that when executed on one or more processors, cause the one or more processors to receive, for each of alarm rules, one or more alarm rule parameters for each of the alarm rules from a user device, receive security system data from a security system, and for each alarm rule of the alarm rules determining, based on the one or more alarm rule parameters for the alarm rule, whether the alarm rule is triggered by the security system data and generating an alarm for the alarm rule in response to determining that the alarm rule is triggered.

Abstract: A computing device for managing a security system is disclosed. The computing device includes one or more processors. In some embodiments, the one or more processors can receive a number of events occurring in one or more of a number of polling loop networks. The events are monitored by a control device. The one or more processors can determine whether an occurrence frequency of the events exceeds a first threshold, where the occurrence frequency is defined as a number of the events divided by a period of time during which the events occurred. The one or more processors can in response to determining that the occurrence frequency exceeds the first threshold, automatically notify a user of the security system via a web application.

Abstract: A rules-based emergency exit misuse identification system, including one or more cloud servers. The one or more cloud servers are configured to store instructions to be executed on one or more security systems. The one or more security systems are configured to receive emergency data from a plurality of sensors for a plurality of emergency exits, the emergency data indicating activity of the plurality of emergency exits. The one or more security systems are configured to identify one or more emergency exits for which a burglar alarm event occurred. The one or more security systems are configured to identify past burglar alarm events associated with the one or more emergency exits for which the burglar alarm event occurred. The one or more security systems are configured to determine if the burglar alarm event qualifies as a delay event. The one or more security systems are configured to register and save the emergency data including the burglar alarm event if the burglar alarm qualifies as a delay event.

Abstract: Systems and methods for alarm panel analysis include receiving a plurality of alarm events from the respective alarm panels monitoring corresponding buildings. An alarm analysis system may classify the alarm panels by identifying an alarm type for the alarm events. The alarm analysis system may determine a number of occurrences of each alarm type for the alarm panels, and generate a data point for a dataset for the alarm panels. The alarm analysis system may identify statistical dividers in the data points for the data set, which may be used for assigning a ranking for the alarm panels based on their location in relation to the statistical dividers. The alarm analysis system may construct and a monitoring dashboard which includes the rankings of the alarm panels, which may be rendered on a display to an end user.

Abstract: A user interface for a security system includes a processing circuit, the processing circuit including a processor and memory coupled to the processor, the memory having instructions stored thereon that, when executed by the processor, cause the processing circuit to receive, from a user via a user device, a user request for information relating to the security system, determine, using natural language processing, an intent and one or more entities associated with the user request, the intent describing a purpose of the user request and the one or more entities describing a type or source of security system data, generate a response to the user request based on the intent and the one or more entities, wherein the response is a graphical display of security system data, and send the response to the user device.

Abstract: There is provided a method, a system and a computer program product for supporting a decision making process. The system receives a decision model from a decision maker, the decision model used for determining a solution to a decision problem based on attributes and uncertainties of the decision problem. The decision problem includes information about a plurality of outcome vectors that represent all possible outcomes and the uncertainties associated with the decision problem. The system determines whether the received decision model can be solved without receiving any preference information from the decision maker. The system receives partially specified preference information from the decision maker if the received decision model cannot be solved without any preference information. The system solves the decision model with the partially specified preference information. The system recommends, based on the solution, one or more decisions to the decision maker.

Abstract: There is provided a method, a system and a computer program product for supporting a decision making process. The system receives a decision model from a decision maker, the decision model used for determining a solution to a decision problem based on attributes and uncertainties of the decision problem. The decision problem includes information about a plurality of outcome vectors that represent all possible outcomes and the uncertainties associated with the decision problem. The system determines whether the received decision model can be solved without receiving any preference information from the decision maker. The system receives partially specified preference information from the decision maker if the received decision model cannot be solved without any preference information. The system solves the decision model with the partially specified preference information. The system recommends, based on the solution, one or more decisions to the decision maker.

Abstract: Systems and methods for alarm panel analysis include receiving a plurality of alarm events from the respective alarm panels monitoring corresponding buildings. An alarm analysis system may classify the alarm panels by identifying an alarm type for the alarm events. The alarm analysis system may determine a number of occurrences of each alarm type for the alarm panels, and generate a data point for a dataset for the alarm panels. The alarm analysis system may identify statistical dividers in the data points for the data set, which may be used for assigning a ranking for the alarm panels based on their location in relation to the statistical dividers. The alarm analysis system may construct and a monitoring dashboard which includes the rankings of the alarm panels, which may be rendered on a display to an end user.